Ballal Teknoloji fenaande Pop-Up Scams e ittude kuutorɗe jokkondire ɗe njaɓaaka¶

So ekran ordinateer maa udditii ɗoon e ɗoon e jeertinaango boɗeejo walla daneejo, ekran timmuɗo, ina wiya "Centre kisal Windows Defender: Trojan.Spyware yiytaa, noddu ballal Microsoft ɗoon e ɗoon e 1-800-..." (walla ko nanndi e Apple macOS ina wiya wonde konte maa iCloud e konte banke ina ngoni les Fenaande Pop-Up**. Hay so ekran oo ina ɓuuɓna logooji laawɗuɗi, ina fija siren walla daande roboo mawnde rewrude e haalooɓe maa, ina ɓuuɓna kursorde mouse maa mbele aɗa waawa ɓuuɓnude... X butoŋ, ordinateer maa alaa mboros. Ko hello web bonngo tan huutortoo Full-Screen API (F11), API coktirgal toɓɓere, e loop Web Audio ngam hulɓinde ma noddude nokku noddaango bonɗo.

Kono, kulhuli ɗii mbaɗtata ko goonga e sahaa nde noddata limoore telefoŋ ndee e ekran, njaɓaa "karallaagal" ngal sosde kuutorgal njulaagu laawɗungal (RMM) walla kuutorgal biro to woɗɗi, ko wayi no AnyDesk Ballal, walla Ballal Jaawngal. So a naatii e nder ordinateer maa, fenaande ina ɓamta monitor maa ("waɗde jokkorgal kisal"), uddita konte feerorde maa keɓtinaaɗe e joɗle banke to internet, huutoroo HTML hello web banke maa ngam waɗde ɗum no ɓe "mbaɗtiri" ma 40 000 dolaar e dow majjere, e udditde ordinateer maa **Unattended Ac:0 AM caggal nde njolnuɗaa telefoŋ. Ndee ɗoo tinndinoore hollirta ko no njaltirtaa e ekran feerorde ɓuuɓnde e nder leƴƴanɗe 5, taƴa jokkorɗe to woɗɗi kuutorteeɗe ɗoon e ɗoon, laaɓtina sarwisaaji RMM cuuɗiiɗi, e uddude konte maa kaalis.

Waɗde ɗum jooni¶

1. SOƊTU kaɓirgal maa Ethernet, softin Wi-Fi e ordinateer maa, walla softin router Wi-Fi galle maa e jolngo wall power outlet jooni jooni. So tawii a noddii limoore telefoŋ maa walla aɗa ɗacca goɗɗo jokkondirde e ordinateer maa, woto bonnu waktu ngam haaldude e fenaande e nder telefoŋ maɓɓe walla etaade close your mothe can and your ɓaleejo ekran maa). Puɗɗagol fiilngo e router maa Wi-Fi walla jogaade butoŋ doole ordinateer maa fotde leƴƴanɗe 10 haa nde jolni, ina taƴa jonnde maɓɓe e remote control ɗoon e ɗoon.
2. So tawii a noddaani limoore ndee, aɗa jokki tan e ekran "Virus Alert" ɓuuɓɗo, ɓuuɓɗo, toɓɓu Alt + F4 (mala Ctrl + Shift + Esc ngam warde feerorde ndee e nder Task Manager) e Windows, walla toɓɓu Command + Option + Escape ngam Doole yaltude Safari/Chrome e Mac. A haɗaaka tawo. Alarm oo ko tablo feerorde web tan ina doga e mbaadi kiosk ekran timmuɗo. So a forsii feerorde ndee, udditaa nde kadi WOTO ɓuɗɗu "Restore Pages", ordinateer maa laaɓa 100 e nder teemedere.
3. If you DID let the caller connect to your computer or smartphone, call your bank, credit union, and brokerage fraud departments from a separate phone immediately. Even if you did not type your bank password while they were watching, scammers run automated scripts over AnyDesk/ScreenConnect file-transfer channels that copy your browser's Login Data konte kuutorteeɗe e kuukiiji jokkondire kuutorteeɗe e nder leƴƴanɗe 10, walla fuɗɗoraade jokkondire ACH/Zelle/Wire ɗe njiyataa caggal ekran rido "Windows Update" ɓaleejo. Rewta men... bank account breach guide jonta jonta.
4. Uddit ordinateer maa e Wi-Fi e Ethernet JOKKOL TIMMOL (walla e nder Windows Safe Mode) hade maa ittude AnyDesk, TeamViewer, ScreenConnect, walla UltraViewer. Ɓoɗɗu tan e... X e AnyDesk walla TeamViewer ittataa naatgol fenaande so tawii ɓe njuɓɓinii "Naatgol ngol alaa ɗo haaɗi" walla ɓe ndarnii ConnectWise ScreenConnect (ScreenConnect.ClientService) Sarwiis gonɗo caggal Windows. Waɗtu ordinateer oo e jokkorgal tawa aɗa itta kala kuutorgal to woɗɗi sosaangal hannde, aɗa softina Sarwiis Windows / macOS LaunchDaemon mum kuutortooɗo laabi les ɗii.
5. Woto meeɗ soodde kaayitaaji dokke, ittude kaalis ɓaleejo, waɗde ƴeewndorɗe, walla neldude kaalis kripto walla jolngo ngam "wartude njoɓdi ɓurtundi ndi njoɓaaka." Feere siynoore fenaande ballal karallaagal ko toɓɓude F12 (Kuutorɗe ƴellitooɓe feerorde) nde naatata e konte maa banke, waylu binndol HTML ngol ballal maa ƴeewndo ummoraade $2,500 ha $42,500, and cry in panic claiming they "accidentally typed $40,000 instead of $400 on your refund form and will be fired unless you wire or mail back the extra $39,600." Not a single cent was actually deposited into your account; they either edited the numbers on your screen or transferred $40,000 from your own savings/HELOC account into your checking account.
6. If a scammer claims they are sending "federal agents" or a "courier" to your house to pick up cash or gold bars, call the police immediately. Moving from phone manipulation to sending a physical money mule courier to your front door is an active felony crime in progress. Lock your doors and call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom, or see our limooje caɗtuɗe regginorde).

Tech support scam & remote access containment decision tree¶

flowchart TD
    Root["Encountered Tech Support Pop-Up, Fake Invoice Email, or Remote Access Scam"] --> DidConnect{"Did You Call the Number or Let Someone Connect to Your Computer/Phone?"}

    DidConnect -->|"NO: Only saw the loud flashing pop-up screen in browser"| BrowserKill["1. Windows: Press Ctrl+Shift+Esc -> End Task on Chrome/Edge/Firefox<br/>2. Mac: Press Cmd+Option+Esc -> Force Quit Safari/Chrome<br/>3. Reopen browser WITHOUT clicking 'Restore Pages' -> Clear cache & block site notifications<br/>(Zero malware installed; you are 100% safe)"]

    DidConnect -->|"YES: Installed software, typed a 9-digit code, or entered a URL they gave me"| CutNet["ƊATAL 1: ƊOONI ƊOO Sokkit Wi-Fi & Ƴettu Kaɓirgal Ethernet (walla Ƴettu Router)"]

    CutNet --> BankLock["ƊATAL 2: Gila e telefoŋ laaɓɗo, noddu Banke maa/Brokerage Fraud Dept ngam ustude konte, ustude kaayitaaji, e ustude ɓoggi"]

    BankLock --> PurgeRMM["ƊATAL 3: So PC ina woni e laylaytol, ittu AnyDesk, TeamViewer, UltraViewer, RustDesk E warde sarwisaaji ScreenConnect / GoTo cuuɗiiɗi"]

    PurgeRMM --> AuditSys["ƊATAL 4: Mumtu huutortooɓe Windows Admin fenaande (‘kuutortooɗo net’), ittu golle puɗɗagol, ustu ‘syskey’ walla BitLocker, e dognude Defender Offline Scan"]

    AuditSys --> RotateCreds["ƊATAL 5: Gila e kaɓirgal laaɓngal, wirno Imeel, Banke, e konte kuutorgal & ɓuɗɗu 'Yaltu e denndaangal joɗle'."]

Faandaare 1: No udditirtaa "Virus Alert" ɓuuɓɗo, timmuɗo (So a noddaani ɓe)¶

Hol ko waɗi jeertinaango Microsoft walla Apple fenaande ina uddita jokkorgal maa, ina salii ɗaccude ma ɓuuɓde butoŋ udditirɗo oo ? Nde a ɓuuɓtii e domen typo-squatted (hono youtbe.com walla espnn.com) walla jokkorgal lowre ad bonnde, hello web ngoo umminii APIiji tati feerorde HTML5 laawɗuɗi e nder loop jaawɗo 10 milisekon: 1. Element.requestFullscreen(): Stretches the webpage over your entire monitor, hiding your Windows taskbar, Mac Dock, and browser tabs. 2. Element.requestPointerLock(): Captures your mouse cursor inside an invisible 1-pixel box (originally designed for 3D browser games like Minecraft), making it appear that your mouse is frozen. 3. window.onbeforeunload + window.print() dialog loops: Pop up kaayitaaji kaaldigal ɗi ngalaa keerol so ɓuuɓde Esc ɗoon ​​e ɗoon re-triggers ekran timmuɗo.

No mbarataa ƴulɓe e nder leƴƴanɗe 10 e Windows, macOS, Chromebook, e iPad¶

1. E nder windows 10 e windows 11:
2. Iyugo Ctrl + Shift + Esc e dow keyboard maa (ɗum udditta Windows Task Manager to dow feerorde ɓuuɓnde ndee).
3. (So tawii jokkorgal maa ina jokki, huutoro Down Arrow tappirde e tappirde maa ngam teeŋtinde Google Chrome, Microsoft Edge, walla Mozilla Firefox, kadi toɓɓu Delete coktirgal walla Alt + E ngam ɓuɗɗude Timminde golle).
4. Ɗatal teeŋtungal so a udditii feerorde maa: So a udditii Chrome walla Edge kadi, ɓuuɓri tokosiri to dow-nyaamo maa naamndo: " Chrome uddaaki no moƴƴi. [Restore]". WOTO ɓuuɓto Restore (ɓuɗɗude Restore udditta tab bonɗo oo). Ɓoɗɗu e... X ngam riiwtude buubaaji ɗii.
5. E nder Apple macOS (MakBook / iMak):
6. Iyugo Command (⌘) + Option (⌥) + Escape e dow keyboard maa ngam udditude windo Doole Woppude Kuutorɗe.
7. Suɓo Safari walla Google Chrome, ɓuɗɗu e Doole yaltude.
8. Jokku les ** .Shift key** e dow tappirde maa tawa aɗa ɓuuɓtoo Safari walla Chrome e nder Dock maa ngam udditde ɗum. Jogaade Shift e nder udditgol ina doola macOS udditaade windo laaɓngo tawa aɗa artira taƴe coktirgal jonnde ɓennunde ndee.
9. Ittugol Pop-ups humpitooji Desktop ("McAfee: 5 Viruss Found" e nder ŋorol les-nyaamo):
10. So tawii aɗa yi’a jeertinaango mboros ina yalta e les-nyaamo barre golle maa Windows (walla dow-nyaamo ekran Mac maa) hay so aɗa woni e lowre internet no woorunoo, aɗa ɓuuɓtoo "Allow" e feerorde Push Notification prompt balɗe ɓennuɗe.
11. E nder Chrome: Koppir e jokkitde chrome://settings/content/notifications nder lowre adrees. Ƴeew les doggol "Aɓaa neldude humpitooji", ɓuɗɗu e toɓɓe tati ɗee (⋮) sara kala lowre nde nganndaaka, cuɓo-ɗaa Ittu / Haɗ.
12. E nder Mikrosoft Edge: Uddit edge://settings/content/notifications e ittude denndaangal lowe ɗe nganndaaka les Jaɓ.
13. E nder Apple Safari (macOS): Uddit Safari > Cuɓe > Lowre > Notifikaaji cuɓo-ɗaa Jaɓde walla Ittu kala lowre nde nganndaaka.

Faandaare 2: Ittugol timmungol scammer kuutorɗe jokkondire to woɗɗi (RMM Porotokol laɓɓingol)¶

So a noddii fenaande ndee, a rewii e jamirooje maɓɓe ngam yillaade lowre (hono... anydesk.com, ultraviewer.net, help.me, fastsupport.com, walla jokkorde keertinnde hono support247.screenconnect.com) e dogginde fiilngo ƴettaango, jokku ordinateer maa haa laaɓa cer (Wi-Fi OFF, Ethernet unplugged) tawa aɗa ƴeewtoo e ittude kala damal caggal jokkondire to woɗɗi.

Ko waɗi fenaande ina waɗa ɗiɗi walla tati kuutorɗe jokkondire to woɗɗi ceertuɗe e sahaa gooto¶

So tawii fenaande jokkondirii e ordinateer maa rewrude e AnyDesk walla Windows Quick Assist, yahdu maɓɓe adanndu nduu e nder balɗe deƴƴuɗe (nde ɓe njiylotoo ma e telefoŋ) ko sosde **ajannde ɗiɗmere, nde yiyataake, ,ScreenConnect Client), Atera, Sinkro, MeshCentral, Ballal Koyngal, walla RMM Taktik. - Koni? Sabu hay so a sikkaani, a jolnii telefoŋ, a ittii AnyDesk e desktop maa, ScreenConnect ina doga no suuɗnde nii NT AUTHORITY\SYSTEM Sarwiis caggal Windows (ScreenConnect Client (xxxx)) mo alaa ikon desktop. So ordinateer maa jokkondirii e Wi-Fi, fenaande ndee ina jogii haa jooni 100 e nder teemedere root jokkondirɗo e masiŋ maa, mo alaa ɗo haaɗi.

Tablo njiylawu mawɗo kuutorɗe Remote Access & RMM ɗe fenaande huutortoo¶

Step-by-step PowerShell script to detect, stop, and eradicate all hidden RMM services (Windows)¶

While your Windows PC is offline, right-click the Start button -> click Terminal (Admin) or PowerShell (Admin), and run this diagnostic and neutralization script to reveal and disable every remote access service installed on your computer:

# 1. List all running or installed Windows Services matching common RMM / Remote Access tools:
Get-Service | Where-Object {
    $_.DisplayName -match "AnyDesk|TeamViewer|ScreenConnect|ConnectWise|UltraViewer|RustDesk|Zoho|LogMeIn|GoTo|Supremo|SimpleHelp|Mesh Agent|Atera|Syncro|Splashtop" -or
    $_.Name -match "AnyDesk|TeamViewer|ScreenConnect|UltraViewer|RustDesk|Zoho|LMI|GoTo"
} | Select-Object Status, Name, DisplayName

# 2. Immediately STOP and DISABLE every matched remote access service so it can never start again:
Get-Service | Where-Object {
    $_.DisplayName -match "AnyDesk|TeamViewer|ScreenConnect|ConnectWise|UltraViewer|RustDesk|Zoho|LogMeIn|GoTo|Supremo|SimpleHelp|Mesh Agent|Atera|Syncro|Splashtop"
} | ForEach-Object {
    Stop-Service -Name $_.Name -Force -ErrorAction SilentlyContinue
    Set-Service -Name $_.Name -StartupType Disabled -ErrorAction SilentlyContinue
    Write-Host "Stopped and Disabled Service: $($_.DisplayName)"
}

# 3. Check for any software or folders created or modified in the last 72 hours in Program Files & ProgramData:
Get-ChildItem -Path "C:\Program Files", "C:\Program Files (x86)", "C:\ProgramData", "$env:APPDATA", "$env:LOCALAPPDATA" -Directory -Force -ErrorAction SilentlyContinue |
  Where-Object { $_.CreationTime -gt (Get-Date).AddDays(-3) } |
  Select-Object CreationTime, FullName

After stopping the services in PowerShell: 1. Iyugo Win + R, type appwiz.cpl, and press Enter to open the classic Programs and Features control panel. 2. Click the "Installed On" column header to sort all installed programs from Newest to Oldest. 3. Uninstall every program installed on the date of the scam (including AnyDesk, TeamViewer, UltraViewer, RustDesk, ScreenConnect Client, Zoho Assist, GoTo Opener, or fake " antivirus / driver cleaners"). 4. Delete leftover ScreenConnect & AnyDesk folders: In File Explorer, delete C:\Program Files (x86)\ScreenConnect Client*, C:\ProgramData\AnyDesk, be %APPDATA%\AnyDesk (deleting C:\ProgramData\AnyDesk\service.conf destroys the scammer's saved unattended password hash and AnyDesk ID).

Step-by-step removal of Remote Access LaunchDaemons on Apple macOS¶

On a Mac (with Wi-Fi turned OFF), scammers install persistent background agents inside /Library/LaunchDaemons be /Library/LaunchAgents. Open Terminal (Applications > Utilities > Terminal) and run:

# 1. Inspect all third-party background LaunchDaemons and LaunchAgents for remote access tools:
ls -la /Library/LaunchDaemons /Library/LaunchAgents ~/Library/LaunchAgents

# 2. Unload and delete any ScreenConnect, AnyDesk, TeamViewer, Zoho, or LogMeIn persistence plists:
sudo launchctl bootout system /Library/LaunchDaemons/*screenconnect* 2>/dev/null
sudo launchctl bootout system /Library/LaunchDaemons/*anydesk* 2>/dev/null
sudo launchctl bootout system /Library/LaunchDaemons/*teamviewer* 2>/dev/null
sudo rm -rf /Library/LaunchDaemons/*screenconnect* /Library/LaunchAgents/*screenconnect* /opt/screenconnect*
sudo rm -rf /Applications/AnyDesk.app ~/.anydesk /Library/LaunchDaemons/*anydesk* /Library/LaunchAgents/*anydesk*
sudo rm -rf /Applications/TeamViewer.app /Library/LaunchDaemons/*teamviewer* /Library/LaunchAgents/*teamviewer*

Phase 3: Reversing "Scammer Retaliation Locks" (msconfig Kokkol Boot Kisal, net user Koolaaɗo kuuɓal, e jolɗe BitLocker)¶

So fenaande ballal karallaagal anndii aɗa salii yoɓde ɓe walla aɗa fawa telefoŋ, ɓe keewi ko waɗde leƴƴanɗe maɓɓe 15 cakkitiiɗe e ordinateer maa ngam etaade uddude ma e Windows mbele ɓe mbaawa ƴettude ma "unlock password" :

1. Wartirde ko... msconfig "Boot Kisal tawa alaa Reso" Trap Lockout¶

Fenaande ina yiɗi toɓɓude Win + R -> sifaa msconfig -> ƴeew Boot kisal (Minimal) -> waylu konngol kuutortooɗo Windows nokku maa rewrude e net user -> e doole reboot. So ordinateer maa fuɗɗiima e Mode Safe mo alaa e laylaytol, PIN maa Windows Hello no woorunoo ina muusi, Windows ina naamnoo konngol kuutorteengol ngol fenaande waɗti jooni ngol. - No ɗum yaltirta: 1. To ekran naatnugol Windows, jogo ** .Shift key** nde ɓuɗɗu-ɗaa e Ikon doole -> Fuɗɗoode ngam naatde e bulo WinRE Recovery Windows -> Caɗeele > Cuɓe yahruɗe yeeso > Ɗaɓɓaande yamiroore. 2. So scammer oo softinii boot normal in bcdedit (safeboot minimal), dognu ndee yamiroore ngam artirde boot no woorunoo ɗoon e ɗoon:

bcdedit /deletevalue {default} safeboot

net user

2. Ƴeewtaade so tawii fenaande wujjii konte kuutorteeɗe e feerorde maa (Login Data / Kaɓirgal iCloud)¶

So tawii ekran maa ina ɓalee TeamViewer walla mbaadi "Monitor ɓaleejo" ScreenConnect, mbele fenaande ndee yaltinii konte maa? - Uddit Google Krom (chrome://password-manager/settings) walla Mikrosoft Edge (edge://wallet/settings). Fenaande ina heewi ɓuɗɗude "Yaltin konte" (walla ƴettude... %LOCALAPPDATA%\Google\Chrome\User Data\Default\Login Data Fiilde SQLite e Local State DPAPI key) e nder leƴƴanɗe 30 jokkondirde. - Tesko-ɗen kala innde kuutortooɗo e konngol kuutortooɗo e nder feerorde maa web, ko fenaande oo ƴetti ɗum. Huutoro ordinateer maa walla smartphone ceertuɗo, laaɓɗo ngam waylude konte imeel maa, banke maa, brokerage maa, taksi maa, Amazon, e konngol maa enternet, e ittude jokkondire feerorde kuutortooɗe men ƴettugol token session e ittugol session aduna ardotooɗo.

3. Ƴeewtaade e ittude Applianceeji jokkondire to woɗɗi gonɗi e Android walla iPhone (AnyDesk / TeamViewer QuickSupport)¶

Ko ɓuri heewde, ballal karallaagal e fenaande "Geek Squad / Amazon / Norton Refund" fenaande kadi ina doga e fenaande ngam waɗde AnyDesk Remote Control walla TeamViewer QuickSupport e dow iPhone walla smartphone Android maɓɓe ngam fenaande waawa janngude binndol banke 6-digit FAMS direct S fuɗɗoraade jolngo e laptop: - E nder Android: ƳEEW Mode Aeroplane, udditaa Cuɓe > Kuutorɗe > Ƴeew kuutorɗe ɗee kala, e ittu AnyDesk, Ballal Jaawngal TeamViewer, Ballal Zoho, walla kala "AdControl / plugin" pack balloowo Ko adii, udditu Cuɓe > Keɓe -> Apps ƴettaaɗe e ƴeewto hay plugin remote jogaaki martabaaji Keɓe. - E nder iPhone / iPad: E nder iOS, AnyDesk e TeamViewer mbaawaa yahdude e koppi maa no feewi, kono eɗe njuɓɓina ekran maa iPhone (ina heen banndiraagal SMS 2FA naatoowo) e jokkorgal Apple ngal Ekran Jaaynde. Sokkit les gila e ŋorol dow-nyaamo ngam udditaade Catal ɗowgol, hoolkiso boɗeejo Butoŋ Ƴeewndo Ekran / Jaaynde Ekran ina OFF, momtu app AnyDesk walla TeamViewer e Ekran maa Jaɓɓorgal, ƴeewto Cuɓe > Huuɓtodinnde > Njuɓɓudi VPN & Devicen ngam momtude kala porofaayiil konfiguraasiyoŋ mo anndaaka.

Faandaare 4: Reentaade kaalis so tawii a yoɓii, a naatii e banke maa, walla a neldii ID maa¶

So tawii fenaande ndee yiyii ma aɗa naata e banke maa, o felliti yoɓde "abonmaaji firewall duuɓi 5", walla o fooli ma e fenaande "40 000 dolaar njoɓdi ɓurtundi" HTML edit:

1. So a naatii e Banke Online tawa fenaande ndee ina jokkondiri:
2. Noddu Departemaa Fraud banke maa ɗoon e ɗoon. Haaldu e maɓɓe: "Miin ko mi ƴaañiiɗo e fenaande ballal karallaagal to woɗɗi ɗo bonɗo joginoo ordinateer am e AnyDesk/ScreenConnect tawi jonnde am banke to internet ina udditaa."
3. Ñaago-ɗee banke oo yo:
   • Uddit limooje konte maa ƴeewndo e desorɗe peeñɗe e udditde limooje konte kese (sabu fenaande ina uddita bayyinaango maa lewru PDF nder portal banke maa ngam ƴettude Limoore Routing e Limoore Konte maa timmunde ngam fenaande debit ACH garoowo).
   • Woppu kala jolngo ACH, yoɓde Zelle, ƴeewndo Bill Pay, walla jolngo wire.
   • Ƴeewto so tawii fenaande ndee waɗii kaalis hakkunde konte maa ndernderiije (yeru, yahde $25,000 gila e Line of Credit maa Savings walla Home Equity Line of Credit e nder konte maa Checking ngam fenaande "yoɓde ko ɓuri heewde").
   • Wottu denndaangal toɓɓe mooftirgel OAuth kuutorteeɗe (Plaid, Yodlee, Finicity) e ustude innde kuutortooɗo banke maa to enternet, konngol maa, e naamne kisal maa.
4. If you bought Target, Apple, Razer Gold, Lowe's, Home Depot, or Steam Gift Cards:
5. Hay so a janngii limooje PIN gonɗe caggal kaayitaaji dokke ɗee to fenaande, noddu limoore laawɗunde Gift Card Fraud / Customer Service gonnde caggal kaayitaaji ɓalli ɗii ɗoon e ɗoon tawa aɗa jogii seedantaagal kaayitaaji ɗii e junngo. Yahooɓe mawɓe (Apple, Target, Home Depot, Lowe’s, Walmart) ina mbaawi ustude njoɓdi heddii ndi njoɓaaka e limooje kaayitaaji dokke wujjaaɗe, ɓe ngartira ma so tawii a nanngaama hade njulaagu kaayitaaji dokke fenaande oo liɓde ɗum en.
6. If you handed over your Social Security Number, Medicare number, or a photo of your Driver's License / Passport:
7. Place an immediate, free Security Freeze on your credit reports at Equifax, Experian, and TransUnion (and ChexSystems for bank accounts) using our identity theft response and credit recovery ardotooɗo.

Prevention: How to scam-proof your computer and protect aging parents or relatives¶

If you are cleaning up a computer for yourself, a parent, or a grandparent after a tech support scam, apply these four technical guardrails in five minutes so a scammer can never connect again:

• Install an Ad & Malvertising Blocker (uBlock Origin / uBlock Origin Lite) in every browser: Over 90 percent of fake full-screen Microsoft and Apple virus pop-ups are served through malicious ad-exchange redirects on news, recipe, crossword, or typo-squatted websites. Installing uBlock Origin blocks 99.9 percent of fake tech support pop-up domains before they ever load.
• Switch the home router or browser DNS to a Malware-Blocking DNS Resolver (1.1.1.2 walla 9.9.9.9): Set the computer or router DNS to Cloudflare for Families (1.1.1.2 be 1.0.0.2) or Quad9 (9.9.9.9), which automatically block newly registered tech support scam domains at the DNS layer.
• Create a Windows Software Restriction / AppLocker or Firewall Rule Blocking AnyDesk.exe, ScreenConnect, be UltraViewer: On a relative's computer who never legitimately uses third-party remote desktop tools, convert their daily Windows account from an Administrator account to a Standard User account (keeping a separate, password-protected Administrator account for family IT maintenance) so they cannot silently install SYSTEM-level RMM services without an administrator PIN.
• Tape a physical reminder label to the top bezel of the computer monitor: Write clearly on a small label: "Microsoft, Apple, Geek Squad, and your Bank will NEVER pop up a phone number on screen or ask you to install AnyDesk/UltraViewer. Press Ctrl+Shift+Esc to close."

Naamne keewɗe naamneede¶

Ardiiɓe jokkondirɓe¶

• Sosiyeteeji bonɗi, ransomweeji, e mborosaaji njiylawu
• Jaɓɓugol maande joɗnde, malware infostealer, e ittugol kuutorgal
• Bonannde konte banke e jolngo kaalis mo yamiraaka
• Jaabawol gujjugol identiteeji e heɓtude njoɓdi
• Lockout gardiiɗo konngol e ƴellitgol vault e nder sahaa
• Deepfake daande clone e AI fenaande
• Reggindo limooje emergency

Fuɗɗoode ƴeewtaama¶

• Federal Trade Commission (FTC) (United States): How to Spot, Avoid, and Report Tech Support Scams (Pop-Up Warnings, Refund Overpayment Scams, and Gift Card Fraud).
• Cybersecurity and Infrastructure Security Agency (CISA), FBI, and NSA Joint Cybersecurity Advisory (AA23-025A) (United States): Protecting Against Malicious Use of Remote Monitoring and Management (RMM) Software (ConnectWise ScreenConnect and AnyDesk Abuse).
• National Cyber Security Centre (NCSC) & Action Fraud (United Kingdom): * Dealing with Suspicious Tech Support Calls and Unauthorised Remote Access Removal*.
• Microsoft Security Response Center & Apple Platform Security: Official Guidance on Tech Support Scams (support.microsoft.com/security), Browser Fullscreen/PointerLock Abuse, and Removing Unauthorized Configuration Profiles.